On the user's edit page, in the roles section of the sidebar card, set Global User Role (or leave it at "No Admin rights" for none). If your account has more than one kitchen location, an additional "[Location Name] User Role" dropdown appears for each location, defaulting to "Default Global Role" — set it only if that user needs a different role at that specific location.